Vulnerability in GCP Cloud Composer Allows Attackers to Exploit Malicious PyPI Packages

23 Apr 2025

CloudSecurityGCPVulnerabilityPyPIDataTheftPrivilegeEscalation

A vulnerability in GCP Cloud Composer allows attackers to exploit malicious PyPI packages to steal cloud data. This flaw enables attackers to elevate their privileges using compromised PyPI packages. The impacts include the theft of sensitive data stored in the cloud.

Read the original article on freebuf.com

Vulnerability in GCP Cloud Composer Allows Attackers to Exploit Malicious PyPI Packages | Cyber Hub